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As/ 1 

( a wireless device for use by a 
an access point connected to 



Claimed is: 

A secure wireless local area network (LAN), comprising: 

wireless device operator; 

I wired LAN in communication with the wireless device 
through an air channel for authentica ting the wireless device; and 

an authentication server com ected to the wired LAN for providing the operator with 
access to the wired LAN after authenticating the access point, the wireless device, and the 
operator. 
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2. The secure wireless I J 
authentication device for sending a fi 



second authentication message incluc ing validating information about the access point. 



of claim 1 wherein the access point includes a first 
•st authentication message to the wireless device, the 



3. The secure wireless I^AN of claim 2 wherein the wireless device includes a 
second authentication device for sen 

the first authentication message inclijiding validating information about the wireless device 
and the operator. 



ping a second authentication message to the access point, 



4. The secure wireless 
and second authentication messages 
wireless device. 



I|AN of claim 3 wherein the access point sends the first 
to the authentication server after authenticating the 



5. The secure wireless IJAN of claim 3 wherein the first and second 
authentication devices are smart care s. 



6. The secure wireless 
access point and the authentication 
access point and the authentication 
information about the access point, vj 



LAN 



S€ rver 



seirver 



7. 



The secure wireless L 



of claim 1 including a control channel between the 
for sending an authentication message between the 
, the authentication message including validating 
ireless device, and operator. 



AN of claim 6 including a data channel on the wired 



LAN for sending data from the wireless device to any other device coupled to the wired 



LAN, the data channel being enablec 



after the authentication message is validated by the 
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authentication lerver. 



8. The secure wireless LAN of claim 6 wherein the communications between the 
wireless device and the access point and over the control channel is encrypted. 

5 \ 

9. A sebure wireless local area network (LAN), comprising: 
a wireless means for use by a wireless device operator; 

an access means connected to a wired LAN for authenticating the wireless means; 
an authentication means connected to the wired LAN for enabling access to the wired 
10 LAN after authenticatmg the access means, the wireless device, and the operator. 

k> \ 

10. The seciure wireless LAN of claim 9 wherein the access means includes a first 

i'^z \ 

authentication means fori generating, encrypting, and transmitting a first authentication 

\ 

w message to the wireless aevice, the first authentication message including validating 

15 information about the access means. 
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11. The secure wireless LAN of claim 10 wherein the wireless device includes a 
second authentication means for generating, encrypting, and transmitting a second 
authentication message to the access means, the second authentication message including 
validating information abouA the wireless device and the operator. 



25 



12. The secure wiieless LAN of claim 1 1 wherein the first authentication means 
transmits the first and second authentication messages to the authentication means after 
authenticating the wireless device. 



13. 



The secure wireless LAN of claim 1 1 wherein the first and second 



authentication means are smart cards. 



14. The secure wireless LAN of claim 9 including a control channel between the 
30 access means and the authenticati(Li means for sending an authentication message between 
the access means and the authentication means, the authentication message including 
validating information about the access means, the wireless device, and the operator. 
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15. The secure wireless LAN of claim 13 wherein communications between the 
wireless device and the access means ana over the control channel are encrypted. 
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16. A method for operatin^a local area network (LAN), comprising: 

generating a first authenticatiq/n message including validating information about an 
access point connected to a wired LJ 

transmitting the first authen^cation message from the access point to a wireless device 
over a wireless channel; 

validating the access point/by analyzing the first authentication message; 

generating a second authentication message including validating information about 
the wireless device and a wirelesls device operator; 

transmitting the second authentication message from the wireless device to the access 

point; 

validating the wireless^aevice by analyzing the second authentication message; 
transmitting the first and second authentication messages to an authentication server 
after vahdating the access point and the wireless device; 
validating the operator; and 



lanne 



enabling a data channel between the wireless device and other devices on the wired 
LAN after validating the access point and the operator. 



17. The method of claim 16 wherein transmitting the first authentication message 
includes transmitting information about the access point contained in a first authentication 
device. 



25 18. The metl|od of claim 17 wherein transmitting the second authentication 

message includes transmitting information about the wireless device and the operator 
contained in a second authentication device. 



19. The melhod of claim 16 wherein transmitting the first and second 
30 authentication messages includes establishing a control channel between the access point and 
the authentication serv sr. 
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20. The method of claim 16 including encrypting infomiation transferred over the 
wireless and control chaimel. 
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